Port 22

~ 7 Jul 2021 ~

[Whitepaper] XDR vs. NDR/NTA What do Organizations Truly Need to Stay Safe?

Microsoft patches PrintNightmare even on Windows 7 but the terror isnt over

Kaseyas VSA SaaS restart fails, service restoration delayed by at least ten hours

~ 6 Jul 2021 ~

Kaspersky Password Manager's random password generator was about as random as your wall clock

Microsoft Issues Emergency Patch for Critical Windows PrintNightmare Vulnerability

Ransomware-hit law firm gets court order asking crooks not to publish the data they stole

Researchers Learn From Nation-State Attackers' OpSec Mistakes

Aclpwn.Py Exploit ACL Based Privilege Escalation Paths in Active Directory

Aclpwn.Py Exploit ACL Based Privilege Escalation Paths in Active Directory

Aclpwn.Py Exploit ACL Based Privilege Escalation Paths in Active Directory

Preparing for your migration from on-premises SIEM to Azure Sentinel

Vulnerability in the Kaspersky Password Manager

British Airways data breach lawsuit settled: Airline coughs up potentially millions to make sueball bounce away

British Airways data breach lawsuit settled: Airline coughs up around 30m to make sueball bounce away

Alleged Cybercriminal Arrested in Morocco Following Interpol Probe

Why the Password Isn't Dead Quite Yet

Philips Vue PACS

Moxa NPort IAW5000A-I/O Series Serial Device Server

Quantum Key Distribution: Is it as secure as claimed and what can it offer the enterprise?

DARPA nails cash to project 'FENCE' a smart camera that only sends pics when pixels change

Kaseya says it's seen no sign of supply chain attack, sets SaaS restoration target of Tuesday afternoon, on-prem fix to follow

Kaseya Rules Out Supply-Chain Attack; Says VSA 0-Day Hit Its Customers Directly

Interpol Arrests Moroccan Hacker Engaged in Nefarious Cyber Activities

Q&A From the Executives and Ransomware: Stop, Collaborate, and Listen! Webcast

Home schooling for Cyber Professionals Part 2 Students and instructors share their training routines and tips.

~ 5 Jul 2021 ~

The cost of cyber insurance increased 32% last year and shows no signs of easing

The wheels come off Formula 1's notification service as fans plied with attacker's messages

What's this about a lawyer looking for an heir? City of London Police seek IT crew to help crack down on fraud

Amazon Echo Dots Store a Wealth of DataEven After a Reset

REvil ransomware attack against MSPs and its clients around the world

Stealing Xbox Codes

Getting Started with Security Testing: A Practical Guide for Startups

DiDi, Chinas Uber analog, booted from local app stores for data naughtiness

IT for service providers biz Kaseya defers decision about SaaS restoration following supply chain attack

TrickBot Botnet Found Deploying A New Ransomware Called Diavol

~ 4 Jul 2021 ~

Microsoft Urges Azure Users to Update PowerShell to Patch RCE Flaw

How REvil Ransomware Took Out Thousands of Business at Once

REvil Used 0-Day in Kaseya Ransomware Attack, Demands $70 Million Ransom

~ 3 Jul 2021 ~

Kaseya supplychain attack: What we know so far

IT management biz Kaseya pwned by miscreants to infect businesses with ransomware

Do Not Stare Into the Crypto Orb

Android Apps with 5.8 million Installs Caught Stealing Users' Facebook Passwords

Kaseya Supply-Chain Attack Hits Nearly 40 Service Providers With REvil Ransomware

Learn to Code Get 2021 Master Bundle of 13 Online Courses @ 99% OFF

~ 2 Jul 2021 ~

A New Kind of Ransomware Tsunami Hits Hundreds of Companies

Friday Squid Blogging: Best Squid-Related Headline

Digital rights org claims cyberattacks against Filipino media outlets come from government and army

Microsoft tells US lawmakers cloud has changed the game on data privacy, gets 10 info demands <i>a day</i> from cops

Another 0-Day Looms for Many Western Digital Users

Week in security with Tony Anscombe

Twitter now lets users set security keys as the only 2FA method

The PrintNightmare continues: Microsoft confirms presence of vulnerable code in all versions of Windows

SOC Investment Improves Detection and Response Times, Data Shows

More Russian Hacking

Brit firm fined 200k for banging on about missold PPI in 11.4 million nuisance calls

New Mirai-Inspired Botnet Could Be Using Your KGUARD DVRs in Cyber Attacks

Mongolian Certificate Authority Hacked to Distribute Backdoored CA Software

New Google Scorecards Tool Scans Open-Source Software for More Security Risks

Recommended Sources for Ransomware Information

~ 1 Jul 2021 ~

PrintNightmare: Kicking users from Pre-Windows 2000 legacy group may thwart domain controller exploitation

NSA, FBI Reveal Hacking Methods Used by Russian Military Hackers

Microsoft Warns of Critical "PrintNightmare" Flaw Being Exploited in the Wild

Microsoft and Eclypsium lock horns over Dell SupportAssist flaws on secured-core PCs

Intuit to Share Payroll Data from 1.4M Small Businesses With Equifax

Microsoft warns of serious vulnerabilities in Netgear's DGN2200v1 router

Microsoft warns of serious vulnerabilities in Netgear's DGN220)v1 router

Fancy Bear Is Trying to Brute-Force Hundreds of Networks

Insurance and Ransomware

Cyber insurance model is broken, consider banning ransomware payments, think tank suggests

Cyber insurance model is broken and ransomware payments should be banned, says think tank

WhiteHat Security Rebrands as NTT Application Security

Do cybercriminals play cyber games in quarantine? A look one year later

Windows 11's Security Push Leaves Scores of PCs Behind

Johnson Controls Facility Explorer

Sensormatic Electronics C-CURE 9000

Delta Electronics DOPSoft

Mitsubishi Electric Air Conditioning System

Mitsubishi Electric Air Conditioning Systems

All Bachmann M1 System Processor Modules

Stop Playing Catchup: Move From Reactive to Proactive to Defeat Cyber Threats

IndigoZebra APT Hacking Campaign Targets the Afghan Government

Rethinking Application Security in the API-First Era

Facebook Sues 4 Vietnamese for Hacking Accounts and $36 Million Ad Fraud

3 Steps to Strengthen Your Ransomware Defenses

The Summit for You on Managing Human Risk SANS 2021 Security Awareness Summit

~ 30 Jun 2021 ~

Microsoft Discloses Critical Bugs Allowing Takeover of NETGEAR Routers

Hackers Wanted in the U.S. for Spreading Gozi Virus Arrested in Colombia

Microsoft hooks up with MITRE to map Azure's ATT&amp;CK surface for 'proactive security'

We Infiltrated a Counterfeit Check Ring! Now What?

Global police shut down VPN service favored by cybercriminals

International law enforcement op nukes Russian-language DoubleVPN service allegedly favoured by cybercriminals

Microsoft faces up to an old foe with out-of-band patch for PDF weirdness

Microsoft finds new NETGEAR firmware vulnerabilities that could lead to identity theft and full system compromise

Leaked print spooler exploit lets Windows users remotely execute code as system on your domain controller

Intl. Law Enforcement Operation Takes Down DoubleVPN

8-month suspended sentence for script kiddie who DDoS'd Labour candidate in runup to 2019 UK general election

The critical role of Zero Trust in securing our world

3 Things Every CISO Wishes You Understood

UK arm of international charity the Salvation Army hit by ransomware attack

Common Facebook scams and how to avoid them